cvlac-mcp

MCPcommunity

v1.0.6Stivenson Rincón MoraISCUpdated 3d agonpm GitHub

Actualiza tu hoja de vida de CvLAC (MinCiencias) conversando con tu asistente de IA, sin llenar formularios a mano. Servidor MCP con Playwright.

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

1kDownloads/wk

1GitHub stars

3d agoLast update

Package

AuthorStivenson Rincón Mora

LicenseISC

Version1.0.6

Sourcenpm+mcp-registry

GitHubstivenson/cvlac-mcp

SBOMCycloneDX 1.6 ↓

Trust Status

B

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface13 tools · none privileged

Security scan✓ Cleanv1.0.6 · 1d agoHow well does this scan work?

EvalsNone

IndexedOct 4, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

13 tools · none privileged

Statically extracted from the published packagev1.0.6 · 1d ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

loginAuthenticate in CvLAC and persist the browser session.

Authenticate in CvLAC and persist the browser session.

No input schema was published for this tool.

read_cvlacRead current CvLAC sections, including articles, books, chapters, theses, juries and five kinds of technical production.

Read current CvLAC sections, including articles, books, chapters, theses, juries and five kinds of technical production.

No input schema was published for this tool.

read_cvlac_detailRead the full record page of one CvLAC item. The list views only show a couple of

Read the full record page of one CvLAC item. The list views only show a couple of

No input schema was published for this tool.

read_portfolioRead and parse the configured portfolio site (PORTFOLIO_URL), merged with the curated proyectos/software/eventos from data/portfolio-extra.json.

Read and parse the configured portfolio site (PORTFOLIO_URL), merged with the curated proyectos/software/eventos from data/portfolio-extra.json.

No input schema was published for this tool.

diffCompare CvLAC vs portfolio. Returns four buckets: missing, toUpdate, similar

Compare CvLAC vs portfolio. Returns four buckets: missing, toUpdate, similar

No input schema was published for this tool.

update_sectionApply a single change to a CvLAC section. Takes a screenshot for confirmation.

Apply a single change to a CvLAC section. Takes a screenshot for confirmation.

No input schema was published for this tool.

lookup_doiRead-only: look up a DOI in Crossref and return an article draft. Review it, then pass it to update_section with section:"articulos"; this tool does not write to CvLAC.

Read-only: look up a DOI in Crossref and return an article draft. Review it, then pass it to update_section with section:"articulos"; this tool does not write to CvLAC.

No input schema was published for this tool.

complete_productComplete the post-save CvLAC phase for an existing product. It manages ordered keywords, knowledge areas, coauthors and recognitions;

Complete the post-save CvLAC phase for an existing product. It manages ordered keywords, knowledge areas, coauthors and recognitions;

No input schema was published for this tool.

read_profileRead the two CvLAC pages that hold one record instead of a list: the researcher

Read the two CvLAC pages that hold one record instead of a list: the researcher

No input schema was published for this tool.

update_profileWrite the researcher profile text and/or the academic social networks. Networks are

Write the researcher profile text and/or the academic social networks. Networks are

No input schema was published for this tool.

syncRun a full diff and apply the unambiguous items (missing + toUpdate). Items that

Run a full diff and apply the unambiguous items (missing + toUpdate). Items that

No input schema was published for this tool.

screenshotCapture a CvLAC page for debugging: the given url, or else the last list, record or

Capture a CvLAC page for debugging: the given url, or else the last list, record or

No input schema was published for this tool.

inspect_formNavigate to a CvLAC URL and return the HTML of all form inputs/selects/textareas for debugging field names.

Navigate to a CvLAC URL and return the HTML of all form inputs/selects/textareas for debugging field names.

No input schema was published for this tool.

13 of 13 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Actualiza tu hoja de vida de CvLAC (MinCiencias) conversando con tu asistente de IA, sin llenar formularios a mano. Servidor MCP con Playwright.

Keywords

mcpmodel-context-protocolcvlacmincienciascolcienciasplaywrightcurriculumcolombiahoja-de-vidascientigruplacinvestigacionplaywright-automation

Alternatives

Comparing tool surfaces…

Tools exposed

13 tools · none privileged · observed 2026-10-04 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

login
read_cvlac
read_cvlac_detail
read_portfolio
diff
update_section
lookup_doi
complete_product
read_profile
update_profile
sync
screenshot
inspect_form

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-04 — observed resolution, not a publisher declaration.

60 packages resolved · 4 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

zod4.6.5
dotenv17.4.2
playwright1.59.11 dependency
- playwright-core1.59.1
@modelcontextprotocol/sdk1.32.017 dependencies
- ajv8.20.0+1 not drawn3 dependencies
  - fast-deep-equal3.1.3
  - fast-uri3.1.8
  - json-schema-traverse1.0.0
- zod4.6.5shown above
- cors2.8.6+2 not drawn
- hono4.13.13
- jose6.2.12
- express5.2.1+27 not drawn1 dependency
  - content-type1.0.5
- raw-body3.0.2+4 not drawn
- ajv-formats3.0.11 dependency
  - ajv8.20.0shown above+1 not drawn
- cross-spawn7.0.6+3 not drawn
- eventsource3.0.71 dependency
  - eventsource-parser3.1.1
- content-type1.0.5shown above
- pkce-challenge5.0.1
- @hono/node-server2.1.3
- json-schema-typed8.0.2
- eventsource-parser3.1.1shown above
- express-rate-limit8.7.0+2 not drawn
- zod-to-json-schema3.25.2

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

56 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 56

side-channel ^1.1.1 — required by qs@6.16.0package cap reached
es-define-property ^1.0.1 — required by qs@6.16.0package cap reached
wrappy 1 — required by once@1.4.0package cap reached
debug ^4.4.3 — required by send@1.2.1package cap reached
encodeurl ^2.0.0 — required by send@1.2.1package cap reached
escape-html ^1.0.3 — required by send@1.2.1package cap reached
etag ^1.8.1 — required by send@1.2.1package cap reached
fresh ^2.0.0 — required by send@1.2.1package cap reached
http-errors ^2.0.1 — required by send@1.2.1package cap reached
mime-types ^3.0.2 — required by send@1.2.1package cap reached
ms ^2.1.3 — required by send@1.2.1package cap reached
on-finished ^2.4.1 — required by send@1.2.1package cap reached

+44 more not listed. The counts by reason above cover all of them.

Not followed: optionalDependencies, peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in browser automation & scraping

microsoft/playwrightPlaywright is a framework for Web Testing and Automation. It allows testing Chromium, Fire
D4Vinci/Scrapling🕷️ An adaptive Web Scraping framework that handles everything from a single request to a
ChromeDevTools/chrome-devtools-mcpChrome DevTools for coding agents
io.github.bytedance/mcp-server-browserMCP server for browser use access
bytedance/UI-TARS-desktopThe Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Inf
microsoft/playwright-mcpPlaywright MCP server
agent-deviceMobile app automation and verification for AI coding agents. CLI, MCP server, and typed No
yusufkaraaslan/Skill_SeekersConvert documentation websites, GitHub repositories, and PDFs into Claude AI skills with a